Security Operations

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm’s work is distinguished by a unique combination of precision and vision.

Based in New York, the Senior Director, Security Operations will be responsible for the ongoing development and oversight of all aspects of the threat hunting, detection and incident response program, including developing processes, procedures and policies that ensure threats are timely detected, responded to and resolved.

The Senior Director, Security Operations advises the Information Security Team on the tactics, techniques and procedures of current threat actors, emerging threats, relevant and timely IOCs and all aspects of threat hunting, detection and analysis. The scope of this position is firm wide and requires a thorough understanding of all the IT systems the firm uses, and how those systems are secured.

This role reports to the Chief Information Security Officer.

Responsibilities include:

• Developing, managing and evolving a comprehensive, state-of-the-art threat hunting, event analysis and incident response capability.
• Performing detailed and complex analysis tasks, including malware analysis.
• Providing technical leadership for all relevant information security platforms.
• Serving as the final escalation point for issues related to threat hunting, event detection/analysis and incident response.
• Overseeing and directly participating in the administration of the firm’s SIEM and other relevant information security technology platforms.
• Taking the lead role in responding to and containing information security related incidents.
• Ensuring IOAs and IOCs are timely integrated into relevant systems and platforms.
• Managing/curating threat intelligence both human and machine readable.
• Partnering with IT managers to develop and maintain best practices and policies for security of all internal systems.
• Communicating with firm Senior Leadership in the absence of or as directed by the Chief Information Security Officer.
• Playing a primary role in the selection of new information security technologies.
• Overseeing and directly participating in the installation, configuration, and monitoring of relevant information security technologies.
• Assisting in the development and knowledge transfer to information security team members, as well as other IT or firm groups.

Qualifications: